CVE-2023-47359
CriticalSummary
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in memory corruption.
Risk Assessment
Memory corruption may lead to unauthorized data access or execution of malicious code, posing a serious security threat to the system.
Recommendation
It is recommended to update VLC to version 3.0.20 or later to mitigate this vulnerability.
Other vulnerabilities in Videolan VLC
See all- CVE-2023-47360High
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
- CVE-2017-8311High
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before version 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.
Original NVD description (English source)
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.